Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/463bf7ed-66c7-3ae8-854d-80c8af425eef.roa
File:                     463bf7ed-66c7-3ae8-854d-80c8af425eef.roa (raw, json)
Hash identifier:          PwjmekxHlPN1ah3E/Yl1dxr/kyeMgYW4f9ZeC50uTkE=
Subject key identifier:   DB:A1:44:E9:14:90:6C:32:CD:BC:C6:AC:A7:CC:20:6B:80:8C:D7:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C79F6C1F585DF98480C95100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/463bf7ed-66c7-3ae8-854d-80c8af425eef.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.250.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:6c:1f:58:5d:f9:84:80:c9:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=6c01b05e-d513-4147-a2ef-f4b51e775031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:34:a1:16:1d:b4:a3:28:59:27:c0:18:b2:
                    37:9a:f4:d4:ac:37:e3:a0:8a:3b:52:25:ea:88:d7:
                    b5:e2:82:c0:96:89:63:f3:7b:2a:8c:98:83:1c:22:
                    e8:90:17:10:a1:85:31:dc:21:df:c8:29:1a:d9:04:
                    d4:51:37:00:94:1e:7d:e4:2e:e2:86:44:75:bf:29:
                    16:1d:d4:bb:c4:1a:32:0d:0d:3c:3e:72:df:f4:a7:
                    2d:7e:cc:f4:1b:44:64:f3:96:32:1b:5c:e0:c2:90:
                    79:74:e8:85:aa:3d:f2:ac:a1:87:03:53:fc:d7:f5:
                    d1:c5:79:37:82:ff:b1:bd:8b:b8:27:ad:4d:81:ed:
                    6c:b0:bd:11:28:5d:f8:f9:d6:33:84:5b:a3:d2:6e:
                    bc:c5:ec:09:19:d2:de:47:e2:91:85:75:1d:35:94:
                    b5:70:ce:40:ea:f1:1c:75:d2:9c:b7:82:42:de:76:
                    06:84:d2:24:61:37:be:7a:64:8e:25:91:93:b8:ee:
                    14:cf:db:d8:a9:78:6a:57:66:a2:d7:b1:ea:ff:03:
                    1e:2e:8d:2b:42:36:fb:96:5b:b8:bc:38:be:7d:3b:
                    47:b7:2d:ca:9d:41:b9:51:97:d3:ad:a9:b4:a5:71:
                    d5:d6:d6:0d:21:2d:00:14:ac:b9:80:7e:08:89:f3:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A1:44:E9:14:90:6C:32:CD:BC:C6:AC:A7:CC:20:6B:80:8C:D7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/463bf7ed-66c7-3ae8-854d-80c8af425eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:50:4d:e8:d3:c0:b3:d1:21:90:12:1f:79:a4:87:f9:10:
         6c:ec:d5:55:46:fa:83:05:cd:38:3f:24:4c:c0:97:eb:1f:88:
         b0:16:05:26:36:c1:04:5c:ff:41:ae:4d:84:90:44:dd:8f:2f:
         13:32:db:45:79:e5:23:56:19:e6:af:7d:8c:0c:a0:5a:f4:aa:
         15:21:de:64:f0:48:58:79:49:d8:77:41:6c:ae:c2:93:7b:3b:
         05:00:e3:bf:74:58:51:bf:7c:3b:69:c8:a6:01:c0:a9:f3:4d:
         f7:23:9a:24:17:27:fa:e5:11:29:00:65:07:6e:97:a1:45:1c:
         d2:cd:b5:3e:7d:f2:ed:bd:8a:84:fb:37:47:72:09:db:8e:33:
         08:bb:e4:db:e2:e4:78:45:56:db:4c:a7:cd:5d:d9:0b:64:15:
         ec:48:6b:53:e5:2f:85:89:41:6f:6a:ea:69:71:64:0b:88:e7:
         3e:d2:ca:eb:25:9d:5c:7c:86:17:10:cd:53:b6:ab:cb:db:43:
         21:66:84:85:ee:ba:4f:11:17:e8:a9:84:0e:18:54:93:c2:02:
         9f:97:8a:2c:3d:59:58:70:99:cb:1f:f9:b0:9a:0f:8d:24:ef:
         ac:ec:e6:99:84:29:03:45:bd:1d:c6:55:ae:53:7c:d9:e4:0c:
         b2:fd:b1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:13:50 2025 by rpki-client